diff --git a/scripts/iam/authentik-provision.py b/scripts/iam/authentik-provision.py
index 789a68a..431526e 100644
--- a/scripts/iam/authentik-provision.py
+++ b/scripts/iam/authentik-provision.py
@@ -810,7 +810,7 @@ print("\n[SERVICE ACCOUNTS] Creating service accounts for API access...")
 # Format: "<api>:<action>" e.g. "llm:inference", "memory:write"
 SERVICE_ACCOUNTS = {
     "portfolio-agent": {
-        "roles": ["llm:inference", "memory:read", "s3:read", "sqs:read"],
+        "roles": ["llm:inference", "memory:read", "s3:read", "sqs:read", "temporal:admin"],
         "attributes": {
             "memory_projects": ["homelab", "portfolio"],
             "memory_visibility": "public",